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(57) Abstract 

A network (GSM/GPRS) with functionality which is related to distribution of keys for authorisation, authentication and ciphering, 
subcriber information handling and COR generation. The functionality is combined with the Intemet protocol for transporting data and 
handling macro mobility to form an efficient as well as secure core network for mobile users. 
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A (GSM-GPRS) NETWORK WITH INTERNET PROTOCOL COMBINED FUNCTIONALITY 



The present invention relates to a network (GSM/GPRS) with 
fuhctiohality v;hich is related tP distribution or keys for 
5 authorisation, authentication and ciphering, subscriber 
information handling and CDR generation. 

Since GSM (Global System fpr Mpbile cornmunication) w^s 
ihtroduc^d iti the Nbrdic countries in XS92, penetration has 
reached aS/ h 4P. % and 13 still ihcreMing rapidly. . 

10 However V -*^^ that large investments have been 

rnadie iri this system duiring those years; . GSM. is primarily, a 
.. system, for speech cpitununication, which makes up 98 %.of the 
: total ttafefic. bata services e^cist, but are sloW^ 
: ; ineffiGient and exp^ since they are run on circuit 

15 swi teheed jqbnnecirtions 

In the year 2^^p^ GSM will be enhanced with a general 
packet data service (GPRS) / which uses the same radio access 
as GSM tbgether with a nev/ core network/ based on IP. .A 
maximum of about 150 kbps can be delivered/ but the aqtual 

20 bandwidth v/i 11 be significantly lower due to • the presence of 
other, users and the quality of the radio connection. 
Databases and servers containing subscriber data, equipment' 
data, short message handling, etc.. already in operation for 
the GSMi systerr; will be reused for GPRS. 

25 Tv;o years later, in 2002, UMTS (Universal Mobile 

Telecommunication System) v;ill be taken into operation, ' 
delivering up to 2 Wbit/s over radio v;ith full mobility. 
Contrary to GPRS, the UMTS radio access netv/ork v/ill be 
built from scratch and existing core netv/orks v/ill be 

30 modified and reused to a large extent. For the initial phase 
. of UMTS, the GPRS and GSM core networks are the most 
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interesting candidates because of their capabilities to 
handle mobile terminal and users. 

UMTS will support mixed services, which means everything 
from Internet access to multimedia conferencing. Judging 
5 from how fixed Internet access presently is booming, one is 
tempted to believe that mobile Interriet access will become 
equally popular. In addition/ taking into account the 
development of IP telephony during the .last year and the 
fact that video standards like H.323 ttt.323] are being 

10 developed for IP networks, it is quite possible that ah IP; 
based network is the most future proof- solution for tJ^ 
When constructing public mobile networks, one has to kei^p in 
mind that radio resources aire sdarce ahd that, these ri0tworks 
are expensive to operate, an hence, it is neqessa^fy f^^ 

15 operator to hedre the; meah$ to qh^rge the Users for servic^^^, 
that they use,, in th^ Jti^^at future/ it is doubtful thit; t.his;^^ 
; requirement e^n be. fulfilled .by tP networks . 

Operators, who have large inVegfemetlts in G$M arid GPRS 
systems, could, however, reu^e par of thpse to coltipletrlerit 

20. the shortcpmings of IP networks. 

GSM and its future packet data service. GPilS, has an advanced 
system for 

• authorisation and authentication of users/ terminals , . 
25 including key distribution 

• ciphering over radio, including key distribution 

• subscriber information handling 

• CDR generation 

through the VLR functionality in the MSG and the SGSN 
3 0 respectively and through the HLR and as well as other data 
bases . 
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The GPiiS backbone is, however, not optimal because of its 
many successive protocol layers, which results in long delays 
and large overhead. 

5 The Internet Protocol is simple, flexible and optimized for 
transporting data through networks.. Enhanced with MobilelP 
for handling mobility, it could be used ^s a core network for 
mobile systems, i:e. the mobile vfser could get direct ^qcess, 
to ; the. Inte^^ without passing through, ah additioifial 

10 net^wd^r^ like GPRS backbone ^ However IP la,ckf 3Upppirt for 
sujDSeriber handling and charging- Authehticatipn .^^^ 
encryption iS suppprted to ensure integrity ah^ 
cprifidentiaiity bu^ key distribution > which iS not 

st^iidardized, is .stil pafpblem*- Tjie. inVentipn of ferg 

15 : sdliitidn of the security problem ^^nd tpxin aR efficient. as 

well as seciire core hetwprk for mibbile US6r^^ : : > . 

; Ther^Plutipn to the pr t^h^ plaiit^S. 

20 UMTS is presently being standeirdardized anci its core netw^^ 

will> in art initial phase, be based on the GPRS core network. 

Advantages to the invention is that is possibly to use the 
fixed network in a more efficient way, when the GPRS 
25 backbone, in a later stage, is replaced by a purer IP network 
for transporting user data under the condition that the 
security issues are solved. 

30 Embodiments of the invention will now be described, by way of 
example, with reference to the accompanying drawings, in 
which: 
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i?igure 1 The basic GSM architecture. 

Figure 2 Overview of the GPRS logical structure 

5 Figure 3 The GPRS Protocol architecture. The GPRS 

backbone is shaded 

Figure 4. General UMTS Architecture with the referencei 
points currently identified in UMTS, Marchi998 
10 IUMTS23 . 01] ; 

i*igfure 5- Usihg 1^ service transport esnd-to^ 

Pi^uire 6. Sc^^ with Mobile IP supg)ort for intra 

15 Uf RM SGSN's t6 haftcSle subscriber 

•"•v.. ■'d$^t:a--'e\ip\-.'-v'-'- - ' \ '-^y- -'^'--'^ 

>igur^ 7 ; . S^rikrib with Hbteii;^ IS* rooming ift: 

foreign networks; * 



20 



Figure 8. Evolution Scenario for UMTS. The IMUf^Gb and 
IWU-Gbu are taken from iumts23 20] . 



25" " A glossary of the^ a]Dbreviatipns used in patent 

specification is set out b^low to facilitate an understanding 
of the present invention. 

AN Access Network 

3 0 AUC Authentication Center 

BBS Base Sub Systism 

CN Core Network 

DHCP Dynamic Host Control Protocol 



wo 99/56445 



5 



PCt/SE99/00621 



ETSi European Teleconununicatxbn 

Standardisation Institute 
GGSN Gateway GPRS Support Node 

*GrPRS General Packet Radio Service 

5 GTP GPRS Tunrieling Protocol 

GSM Olobal System for Mobile 

coniinunicatiotl 
HA . Home Ag^nt 
:. V HLR ; ./Hbine Location Register ^ 
id: SP Service Provider 

IP vifiternet Protocol 

. iWtJ liiterWorking Unit 

• MS Mobile Station 

MSG> .Mobile Services Switching Cehfcer ^ 
1$ Mobfile Termination 0.. v : 

PLMN^ : : /Public Land Mobile Network 
/ PSTN / Pu^ Telephphe Networ^^ 

QoS iQueility of Service : 

SGSN Setvice GPRS Support Node 

20 SlH subscriber Identity Module 

SP Seryice Provider 

TCP Tririspprt Control Protocol 

UDP User Datagtam Protocol 

UE User Equipment 

25 UMTS Universal Mobile Tel ecoitununicat ions 

System 

UTRAN UMTS Terrestrial Radio Access 
Network 

VLR Visitor Location Register 

3 0 UMTS, the third generation cellular system currently being 
specified by ETSI, is the first cellular system to be 
optimized for extensive use of data services mixed with 
speech. One solution is to use the IP protocol for the 
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transport of services across cote and access networks - Using 
a MobilelP core network would allow roaming between the 
radio access networks in a rather straightforward way. 
However, radio resources are Scarce and public cellular 
systems are escpensive to operate, and hence, it is of great 
importance that the userS can be properly charged for 
services that they use. In the near future, it is doubtful 
that this requirement can be fulfilled by (Mobile) IP. 
networks, instead, parts of C3SH/C5PHS could be reiised to 
complement the furictipnality of IP networks. 

In this description, a network Scenario is prfesented whier^ 
the UMTS core network is based on Mobile ipv6, which 
supports roaming and possibly also handover between OTftAN «s ^ 
Since the GSM/GPRS system already has several, key functions 
to handle mobile users, e.g. subscribe 
control, keys for ^rieryptioh oyeif .tM • 
information, the GPRS SGSN node shaulcl .,i?e wsed tO ,hahdl6 
the setup of lower layer eottitaiihieatib^ 

authentication and check 6f subScti^'6f^ pr^ A 
successful lower layer setup should be tequifed in order to 
obtain a MobilelP care-of address. The in^chanisms for 
distributing authorization aiitl encryption keys in QSM/GPRS 
can also be utilized f br distributing keys for the IPsec 
protocol . 

Examples, describing how MobilelP and part of the GPRS 
core network could operate with a UMTS radio access network 
are presented later on in the description. The following 
three sections will give a brief introduction to those parts 
of GSM, GPRS, UMTS and IP that are relevant for this study. 
These are followed by a short discussion on using IP end-to- 
end in mobile networks, before presenting the examples. 
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GSM 

GSM is a digital cellular system, primarily designed and 
" used for speech communication tgsm] . A few. data services and 
a rich set of supplementary services are standardized. The 
5 GSM network is built up of BSS/s (Base Sub System), 
MSC/VLR's (Mobile Services Switching Center/VisiW?: 
Register) , HLR' s and a few. other dat^ bases and; service 
- . nodes as illustrated in figure 1. The ESS contains base 
Stations and base station do'ritrolleirs* Each is 
la ecjuip&ed W a subscriber identity Modules (SlM) / whicKviS 
•^^ a smart card containing ^ amohg^ o . the; USe^.. ..••.;•/.. . 

^ identity'. ."; ' ;■ ' ■ 

The MSG is the h^airt of the . GSM system ; It ' s duty . is to : • ■ 

'15 ' l f detect new mobile tkr)rtainiais in its s 

; : v^hd .per£^ authentication aiitho^riziatioil 
procedures w^ terminal^ 
^•bQllect information about users from -their HLR ; 
and store the information in the VLR 
20 •register location updates and store th^tn in the 
VLR 

• assist when handover takes place between MSC's 

• create records for charging 

Frequently, the VLR is integrated in the MSG. The Gateway- 
25 MSG is an MSG with additional functionality to handle 

traffic to and from the fixed network. For incoming traffic 
the G-MSC asks the HLR for routing information to the 
current MSG of the user. 

The MSG communicates with databases like the home location 
30 register (HLR) and the equipment identity register (EIR) via 
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an SS7 based signaling system called MAP (Mobile AppliGaUrdri 
Part) . 

The HLR stores the identity and user data of all the 
subscribers belongiiig to the area of the related G-MSC . The 
5 IMSl (inteirnational Mobile Subscriber Number), th§ phpne 
number; service profile etc. ar^ permanently stored in th^ 
HLR. For routing of incoming traffic, the user's current VLift 
and forwarding information is stored temporarily. 
Authentication , and ciphei-ing keys , V^rhicrh ar-^ derive^ iti thf ^ 

10 AUc {/^thentication C^^ available t.rpm t}}js^ WtMi 

Authenticatibn and authori^atjiQn th^ teritiinaL tak^ 
place each tiiTie a connection is settip, i.e.; for each call;^;;- 
The authentication procedure i$ based on the; ^uthenl^^^^ 
algprithin, which is stored on the 03^ q in„ tj^^ 

15 The AUG E>icks a randpin liuinfe^r f i^am algpa^itpliflfi^^^^ :f r ^ 

■ creates the authentication key. The random number an<a the 
key are then passed on to the HLR and the VLR, which sends 
the randorn number t6 th^ mobile' tertninkl » The SIM card Ms^s 
the random nufrd^ the key > which is retur^^ 

20 the network Via the terminal* A cpmparispn 6f the kfey 'jv 
received frpm the terminal and the bbe. 6rigihatingf fafdm thf 
AUG will tell if the terminal is the expected one. *lie^s^^ 
method is used fpr giving the termi'nial the encrilptioh key 
but a different algprithm is used. vfhiiS has the. advantage, 

2 5 that tKe Wcrypt ioh k^^ pVer radio ^~w^ 

could easily be picked up by anyorie. These algorithni^ aiTe 
known nowhere outside the home network. On the teriftinal 
side, the algpritJpLms are embedded, in the SIM card and are . 
available neither to the terminal nor to the user. 



30 
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GPRS 

GPRS (General Packet Radio Service) [GSM 03.60) is a 
packet sv/itched service which, to a large extent,, is based 
on a combination of GSM infrastructure , IP technology and a 
5 set of new functionality. Figure. 2 describes the overview of 
the GPRS logical architecture. The main advantage of GPRS is 
that the limited radio resource is used only when there is 
\ data to transmit . There are two kinds of support nod^s in 
the backbone, SGSN's (Service GPRS GdSN's 
.10 (Gateway GPRS Support Node) . 

The main functiphs of the SGSN are to : 

pearforitv authenticatibn /and other .procedures: to 
let new terminaXis cohheqt to its' service area 

• send/ receive 4ata packiets to/faroiti the GPR^^ 

rl5 V : • Iceep^ recdrd Of/ tllfe mpbiie ' s lo6abi6n^^^ : 
-V serviee -airea . ' * ■ . 

• route data packets from one GPRS bjperafepr b^^^^ 
another 

' • produce charging data records for the charging 
20 and billing system 

The SGSN communicates with the HLRv the EIR, the 
SMS center etc, via a GPRS versic?n of MAP. 

The main functions, of the GGSN are to:. . 
25 •route data packets from one GPRS operator to 
another 

• route mobile terminated data packets to 
appropriate SGSN where the mobile is currently 
located 

3 0 • act as a gateway between GPRS network and 
external data networks (IP, X.25, etc.) 
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• handle de/encapsulation of user data protocol 
packets when communicating with extetnal data 
networks . 

• produce charging data records for the charging 
.5 and billing system 

GPRS Tunneling Protocol, GTP tgprs09 . 60 ] > which is a 
Specific to GPRS, tunnels user data packets between SGSN's 
arid GGSN's. This enables the hetwork to support transmission 
10 of several packet data protocols, even if the prbtpcol is 
not supppr-ed by all SGSN's. GTP also transports signaling 
data for mobility handling between the nocies . illustratied 
in figure 3 > GTP is placed on top of the trag^prt^^^j^ 
Upp laye r iri the: protocpl statck. By u^tlg a hpn-gtap^ ; 
15 ptotocipl to transport ^^^^^1^^ ^B^^:^ • 
- di^f iciiit fa tife^r-s to ^dp anythir^^ 
. fchJ^ otti^i: Ujiidv it ni^l<^es i^ 

ttihheling mfch^h ^^^^^^^^ ^P^^^^""" 

example is: future resource ^^^Y^^i^n^ PJ£^£ 
20 likely to operate in cb^JjMn^ 
tunneling . . 



UMTS 

The UMTS system, which currently is under specif icatipn in 
25 ETSl, is based on a new UMTS Terrestrial Radio Access 

Network (UTRAN) and existing, but evolved, qore networks 
(Cisr) such as IP, GSM/GPRg CN or ATM lumts23 . 0.1] . The 
interworking units (IWU) adapt the different CN's to the lu 
interface if needed. The GRAN and the CN's may evolve 
30 independently of each other, while the IWU's follow the 

evolution of CN'r. n\v\ AN's to insure interconnection between 
these parzs. For flexibility, the user equipment consists of 
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different modules of which one is a UMTS version of the O'SM 
SIM. card, the USIM. A general view of the logical modules 
arid ireference points is shown in figure 4. 

5 the UTFLAN will probably have an internal mobility 

management system, which mearis that/ fqr routing, the CN 
only hedds to keep track of in which UTRAN the mobile 
teritinal is located. The CN will have to handle the 
duh^ciiriber^ call handling, 

10 paging initiation seirvicfe feature analysis, security 

issti^s, ch^rgi etc. Evolved versions of the .GSM and GPRS 
' Chl^s are^ the initial pha^e of ' UMTS Iurnts23 . 20] .: 

^ ^ primarily; th^^ IWU will, deal with translation of protocol 
messages and netw^ parameters, in those cases where the 
15- protobpls in the GN and in the UTHAN are different. If the ■ 
, CiNI. dpe$ ;n^ functionality, required for a UMTS GN,^^^^^^ 

fchis IV)?^ to enhance the CN. The ' 

. .chbice of protpcdl^ over the lu ihtetf ace ha§ not yet been 
made ^ 

20 . The Internet Protocol - 

Th4 Intefhet. Protocol, IP, is designed to route IP packets 
across tietwdrks and network boundaries in a flexible and 
efficient way. Because of its popularity, mahy services have 
been developed to run on top. of the IP protocol* Today, it 

25 is net unusual to implement virtual IP networks within other 
netv;orks based on e.g. ATM or IP, which creates extra 
security, but also additional overhead and processing time. 
The GPRS backbone is one example of such a network. Taking 
into account that UMTS will not be introduced until year 

30 2002, we only consider IPv6 [ipv5] here. 

MobileIPv6 [mobip] is designed to deal with "macro" 
mobility management, i.e. the movements of mobile nodes 
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between different IP subnets. Routing in the Internet is 
based on fixed IP addresses, which depends on the subnet, 
through which the terminal is connected to the Internet. 
When connected to a foreign network, the mobile node needs A 
temporary address using the prefix of the visited network, a 
care-of address, to be able to receive packets. 
Briefly, MobileIPv6 works in the following way: 

• When the mobile node arrives in a foreign subnet, it 
acquires a care-of address using th^ IPv6 addtess 
autoconf iguratibn . 

• The mobile node registers its car#-of address with a 
router in its home subnet: Which acts as the node's Home 
Agent (HA) . The hoitte agent uses proxy Neighbor DiScov^ery 
td : interce^jt the iP^e. pack^is addressed tb the mobile ,. . . 
hcide'S hdifl^ aadsi^^v 'Wie p^lcet^ ttiflftei^ ^jl^ 
mabi 10 node's care-.bf Ad^tf&s using I #v 6 enGapSu^t ipn > 
This . meaiis that the fliobiie node, can fil^w^ys be addressed 
by its home address, independently of Which subnet it is 
roaming in. 

• When packets, which are tunneled froift the home agent, 
arrive ^t the mobile node iflttnediately serids a itteSsage, 
which indludes its current care-of address, to the 
communicating node. After receivihg Such a packet, the 
communicating node will "send packets directly to the 
care-of address. This way, MobilelPv6 inherently supports 
optimized routing, which minimizes the load on the home 
subnet. When changing care-of address, the mobile node 
sends its new care-of address to its home agent and all 
other nodes that it is communicating with. 
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Using IP for Service Transport Across Different 
Networks 

Traditionally, telecom systems have been developed with 
one kind of transmission,, for one 6r a few specific and well 
specified services which need support by the network. GSM is 
one example of these kind of systems where . the time-to- 
market for new services is too long to be competitive . . 

services, services provided by 
thirH-party, etc. krid new services must be easy and fast to 
imEilernent. One possible solution is to us^,: IS> as a epmrnon 
foafmat to deliver serv end-to-end. This does not , 

,n^(iessarily mean that the./ IP. routing mechanisrns have to be 
utilized in all the different- networks . For example, the 
UTRlMsr iias to manage micro mobility, which incltides frequent 
^aLr^ci^ f ^St riioyements between base stations \yhich; Mobile IP is 
...not designed to handle. Instead, the IP layer could be : ; 
prbyided a pbint-to-point connection betweeri the IWU and the 
mobile terminal while the UTRAN handles the changing 
doiinections underneath; 

The main advantages of this approach is that already 
today, an abundance of services and information is available 
on the Internet. Having direct Internet access from the 
mobile terminal would facilitate the convergence of fixed 
and mobile networks ph a service level. 

In figure 5, the end-to^erid IP layer is mapped onto the 
UMTS architecture. The IWU would provide interworking 
between the lower layers of the core network and the access 
network. 
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GSM, IP and Broadband Radio Access - a Mix that 
Matcheis 

As we have seen in previous jsectioiis, the UMTS UTRAN 
together with GSM/GPRS core networks would give us a system, 
5 which would handle mobile users excellently and provide high 
bandwidth connections over the radio interface. There is 
also support for the operator to profit from running such a 
network. However, neither GSM nor GPRS are designed for 
large volumes and the GPRS backbone is rather inefficient 
10 due to the large overhead . 

on the other hand, IP is simple and flexible for 
transporting data through networks. Enhanced with MpbilelP, 
which is optiifiized for rpamihg between subnets, it is an 
interesting network canciidat^ it's 

. 3.5 , support fo?^ subs hatic^ling. Iind ebiL|"gin^ is pc^pr. 



Let us tkerefore stiidy how the diffayettt partg £if<^ 
GPRS and U14TS could interwoirk to sup^ofct mobility. First > Mfe 
will study the case, which is illustrated iri fi^tir^ 6, v^$^ 



20 



the termiiial stays within its home tP network : 




• The mobile terminal arrives at a hew UTRAN and lii?t^iis 




i n fp r ma tiQn.gtbout k^dip parameters . network .4ti_d ..c^AX 



identity, etc. as w^ll as infpTfffiatlon about available 



25 



core networks, service pi^oviders ^jservi^^ 



etc . 



• The mobile terminal sends a registration 

req^uest including parameteirs ^such^ as identity ,^ 



desired service provider etc. 
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♦ The UTRAN forwards the registration r ^. 

the SGSN, which processes it: 
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• The SGSN r on tacts the HLR of the mobile^termiji^ 
. To^ c olTic^^ 
procedure. 

. Once the terminal is^ authenticated arid found to be 
5 "allmjed in thVp^ UTRAN/ all information over 

u7e"r5dio inter face can be encrypted. Encryption 
k^iys^^a^^^^obtaTn^^^^ the_HLR. A raiidom number - is - 

■^iintnto the mpb^iej^^ 
, ; ■ ' With an algorithm stored, in the terminal . This : ;; 

ip .; vJayT^thS'lTeyJ^^ 

At this ppi^_>_^;fck^ 

data a nd iradla^Becii^^ 

' • A Now, the terminal can • ^feart pomniuriicat 
is ' • layer . The terminal listens to router advertisement 

^ •mesSages and solicit the h^ar es t DHCP server: tdhcpl tp ^ y^; 
bbtain a configuration pkraineters and a care-of- , 
address . It is assumed that only stateful address . 
cbhfiguratipn will be used, sinc^ 
20 support for registration of the terminals than 

stateless . Logically , we include the tp fiirictionality 
in the ;SGSi5__andjcay^^e_en^ 

records include the care-p.f_ad4r.ess^.3f,^ 

terminal . 

25 • The mobile terminal will then contact its home 

agent to register its new care-of address 
according to standard MobilelP. 
. The home agent has to accept or reject the registration 
of a care-of address. Before making a decision, the 

30 home agent could contact the HLR (via a new interface) 

to obtain information that this terminal is properly 
registered. In addition, the keys needed for using the 
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IPsec authentication header arid/or the encapsulation 
security pay load tipsec] could be obtained from the 
HLR. The mobile terminal can derive its keys from 
information on its USIM in the same way as in the GSM 
5 system. 

• While the terminal is connected and transmits data^ 
charging data records ate pfoduded by the SGSN' . 
Systems for billing and customer handling, already in 
operation for GSM, can easily be used also for UMTS. 

XQ 

in figure 7, ;the mobile te^ihal is roaming in a .foreign 
network, the procedure fp^ registetihg in that network is 
very similar to the hotne ttetWork; cas^, the only difference 
being that the visited SGS*I* contaGts, the i^LR in tti^ 
IS^ ..terTttinal '^s '^pin^ ■|ietwt>rk, \^itb6?f: -yie^ :^th^; interniatio 

hetwoapk or by tiihneling .tbe MA? i>?^otoc:ol, messages through : 
the Internee > the v,W6bile tfarmiii^l. registers with the . 
home ag^nt as befpr^, 

20 The fiTSi group SMG12: works with. UMfS archite^^ 

evolution S<2enarios.i:umts23 ^30] . One idea for evolutipn is 
depicted in figure 8., The mojst . Straightforward way to 
impleftient UMTS with an already ^xi$ ting. GPRS netwoirk is to 
attach the UTRAN to the Gb intei:face- Vi.a -i:h;e IWU-Gb,; . . . 

25 However, if the UTRAN will be based On IP, a new IP based 
interface, Gbu, should be opened up at the SGSN, requiring 
an iWU-Gbu. In this description we have gone one step 
further and transformed the SGSN into an IWU for a core 
network based directly on standard IP and MobilelP. 
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UMTS, the third generation cellular system which is 
currently being specified by ETSI, is the first one to be 
optimized for extensive use of data services mixed With 
speech. One solution is to use the IP protocol for the 
5 transport pf services across core and access networks. Using 
a Hpbii-elP core network Would allow roaming between URAN's 
in a rather straightforward way. Hpwever, radio resources 
are scarce and public cellular systems ^re experisive to 
operate, and hence, it is of great importance that the Users 
10 can. bf .properly charged foir the seryices they aire, using, in 
the near future >, it is doubtful that tli,is requirement can be 
fuifillec^ by (Mobile)±P networks. Instead, piartis from 
GS^i/OPRS. could be reused to complem^ funetlonality of 

.. I networks. . ' - . 

15 In this description, a netwo^^^ Scenarip is presented where. . .■ , 
ths UMTS cote network is basedl on Mpbi 10/1 
■ supports roaining and between UTRAN' S. : 

'Siiifee the GSM/GPFtS syist^^ h^s Several key functions 

to handle mobile users, e .g . subscriber data/ . Recess 
20 cohtrbl, keys for encryption over radio, accounting 

information, the GPRS ^GSN node should be reused to handle 
the setup of lower layer coittmunicatibn, includifig 
authentication and check of subscriber profile etc. A 
successful lower layer setup should be required in order to 
25 obtain a MobilelP care-of address. The mechanisms for 

distributing authorization and encryption keys in GSM/GPRS 
can also be utilized for distributing keys for the IPsec 
protocol. 
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CLAIMS 

5 1 A network (GISM/GPRS) with functionality which is 

related to distribution bi: keys for aujphprisatibn^ 
authentication and ciphering, subsciribdr information hanqlling 
and CDR generation characterised in that the functionality is 
combined with the internet protocol fot .transporting data and 
10 handling macro mobility to form an. efficient as well as 
secure Core network for mobile users. 

2 A network, as clkimed in claim 1> char ac ift 
. that parts from GSM/G&RS Is reused to cdtriejement .the 

15 functionality of t P jaetworks - / " - 

3 A rl^ftv^r^ as Glaim^d in - claim dli^ra?:fceris#c| in 
that the ^^G is ri^used tp::l^^ ^Btxxp p^^ l^ 
layer cpinmuhicat ion . 
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